I am working on putting together an Incident Response Jump Bag (detailed here).

Any suggestions on what type of container/bag to use for this? It seems like a lot of little items that could be packaged together, and some big items.

I have a messenger bag and backpack, but they don't really seem to cut it.

Anything else that I should take into consideration? (chain of custody issues, etc?)

  • 2
    This is really borderline security question...
    – AviD
    Commented Jan 14, 2011 at 0:38
  • 2
    I have to agree with AviD, the fact that the things in the bag are for ITSec purposes is secondary and only slightly relevant to the actual question, which is about packing. Perhaps you could propose Packing.SE on Area51. Commented Jan 14, 2011 at 1:34
  • I have edited the question to better reflect what I am looking for. Commented Jan 14, 2011 at 4:00
  • 1
    I think this is a borderline question, but I think I'm fairly happy to have it here even if all it does is prompt people to think about things like chain of custody, which they might not otherwise...
    – Rory Alsop
    Commented Jan 14, 2011 at 9:12
  • Ah, I think the chain of custody is a very good on topic issue. Maybe turn some more focus to that, and other possible IR-specific issues, instead of asking your mom to pack your schoolbag :)
    – AviD
    Commented Jan 14, 2011 at 9:16

1 Answer 1


Depending on the amount of kit you require in your jump bag, you may want a wheeled trolley case or a rucksack, to avoid injury (speaking from experience, I once had to implement a wireless honeypot as part of incident response and the kit included 5 laptops (running simulations, logging etc) and my back ached for weeks)

In any case the only real restriction I would advise is keeping it below airline maximum size and weight considerations - putting forensic kit in hold luggage on the return effectively breaks the chain of custody, and if you do have to fly, leave your screwdrivers/multitool at home in case you aren't allowed to fly with it.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .